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UNDER SECRETARY OF DEFENSE 

5CXJ0 DEFENSE PENTAGON 
WASHINGTON. DC 20301-5000 

APF 7 

MEMORANDUM FOR: SEE DISTRTOUTION 

SUBJECT: Clarification of Current DoD Policy on Controlled Unclassified Information 
(CUD 

References: (a) DoD 5200. 1-R, “Information Security Program, “January 14, 1997 

(b) USD(D Directive Type Memorandum, “Interim Information Security 
Guidance”, April 16, 2004 

(c) White House Memorandum for the Heads of Executive Departments 
and Agencies, “Designation and Sharing of Controlled Unclassified 
Information (CUT)”, May 9, 2008 

(d) USD(D and ASD(NH)/DoD CIO Memorandum, “White House 
Approval of Controlled Unclassified Information (CUI) Policy 
Framework”, July 21, 2008 

On May 9, 2008, the President approved the adoption of CUI as the single 
categorical designation to be used throughout the executive branch for most information 
in the Information Sharing Environment The White House Memorandum also 
established a corresponding CUI Framework for designating, marking, safeguarding, and 
disseminating information designated as CUI. To increase efficiency and avoid 
duplication of effort, DoD subsequently expanded the CUI fiamework to include all DoD 
CUI, not just information that falls under the auspices of the Intelligence Reform and 
Terrorism Prevention Act of 2004. 

As a reminder, DoD components are nek to use any of the new' CUI markings 
until the'naliraal level interagency polFcyhasTjeen issued, the DoD-level implementation 
guidance has been published, and the DoD CUI Transition Plan is completed. Until such 
time, existing policy guidance pertaining to information such as For Official Use Only 
(FOUO), SBU, and DoD Unclassified Controlled Nuclear Information, as outlined in 
Appendix 3 of reference a and in Attachment 2 of reference b, must be strictly adhered to. 
Designation, marking, safeguarding and dissemination of such information remains 
unchanged. 

Continued adherence to existing DoD information security policy is critical to 
easuring the Department’s smooth transition to the new CUI firework while the 
national level policy development continues. The DoD CUI effort is being jointly 
worked and continually coordinated with the Office of the Assistant Secretary of Defense 
for Networks and Information Integration/Department of Defense Chief Information 
Officer (OASD(NTI)/DoD CIO). OASD(NII)/DoD CIO is responsible for the 
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Department’s information sharing oversight and CUI information technolog)' policy and 
implementation. My point of contact is Sheila Talley at sheila.tallev((2).osd.mil or 
( 703 ) 607 - 0323 . 




James 
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